cvedb.io
CVE-2018-7949
HIGH · CVSS 8.8
EPSS exploitation probability: 0%
Published 2018-06-01T14:29:00.787 · Last modified 2026-06-17T02:04:00.133

Summary

The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have a privilege escalation vulnerability. A remote attacker may send some specially crafted login messages to the affected products. Due to improper authentication design, successful exploit enables low privileged users to get or modify passwords of highly privileged users.

Affected products

huawei — 1288h_v5_firmware

Does this affect you?

Add your gear to cvedb and we'll alert you only when huawei ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.